PT-2022-3983 · Cisco · Cisco Identity Services Engine (Ise)

Name of the Vulnerable Software and Affected Versions: Cisco Identity Services Engine ISE Software affected versions not specified Description: A vulnerability in the External RESTful Services ERS API could allow an authenticated, remote attacker to obtain sensitive information due to excessive...

CVE-2022-31571

The akashtalole/python-flask-restful-api repository through 2019-09-16 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

CVE-2022-31571

The CVE-2022-31571 entry concerns the akashtalole/python-flask-restful-api repository (GitHub) where an absolute path traversal is possible due to unsafe use of Flask send_file. This vulnerability is documented across multiple sources (NVD, Red Hat, CVE List, PRION, CNVD, etc.), with the core iss...

python-flask-restful-api 路径遍历漏洞

python-flask-restful-api is a python interface repository by the individual developer Akash Talole in India. A security vulnerability exists in python-flask-restful-api, which stems from insecure use of the Flask sendfile function...

The vulnerability of the go-restful web service creation software lies in its ability to bypass authentication using a user-controlled key, allowing users to elevate their privileges.

The vulnerability of the go-restful web service creation software relates to bypassing authentication using a key controlled by the user. Exploiting this vulnerability allows a malicious actor to increase their privileges remotely...

Fedora: Security Advisory for golang-github-emicklei-restful (FEDORA-2022-589a0ad690)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: golang-github-emicklei-restful-3.8.0-1.fc35

Package for building REST-style Web Services using Go...

Fedora: Security Advisory for golang-github-emicklei-restful (FEDORA-2022-185697ef56)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

ghost-in-the-machine (=0.0.70), restful-starlette (>=0.0.1 <=0.0.4) +3 more potentially affected by CVE-2022-2054 via nuitka (>=0.6.10 <=0.6.19.7)

nuitka PYPI version =0.6.10, =0.0.1, =0.0.8, =7.15.0, =7.15.3 - teamscale-cli =7.1.0 Source cves: CVE-2022-2054 Source advisory: OSV:PYSEC-2022-209...

DEBIAN-CVE-2022-1996

Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0...

AZL-41344 CVE-2022-1996 affecting package sriov-network-device-plugin for versions less than 3.7.0-1

Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0...

CVE-2022-1996

Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0...

UBUNTU-CVE-2022-1996

Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0...

CVE-2022-1996

Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0...

CVE-2022-1996

Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0...

go-restful 安全漏洞

go-restful is a package for building REST style web services using Google Go. A security vulnerability exists in go-restful v3.8.0 and earlier, which originates from an authorization bypass via a user control key in go-restful...

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key which is capable of breaking CORS policy and allowing any page to make requests, and retrieve data on behalf of other users. Remediation Upgrade github.com/emicklei/go-restful to version...

CVE-2022-1996 Authorization Bypass Through User-Controlled Key in emicklei/go-restful

Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0...

PT-2022-3324

Name of the Vulnerable Software and Affected Versions go-restful versions prior to v3.8.0 Description The issue is related to an authorization bypass through a user-controlled key. This could allow a remote attacker to elevate their privileges. The vulnerability is also related to CORS filters th...

CVE-2022-1996 Authorization Bypass Through User-Controlled Key in emicklei/go-restful

Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0...